Shopneo - Possible card fraud warning

joshwa · 27 February 2007 at 2:27PM

Can someone explain:

If neoshop used another company to process CC transations, and they were fraudulent, then why don't neoshop NAME the company so we know who to avoid when making online purchases?

I had £500 taken from my bank account by GALA CORAL (WOKING) about 4 months ago but have never used neoshop (thankfully my bank got me the money back). What I don't understand is how / why this continues to happen when GALA CORAL are obviously a point where fraudulent / stolen CC details are used - why is there no investigation into GALA Coral's acceptance of CC details?

ohdearme_2 · 27 February 2007 at 2:42PM

simate wrote:

I couldn't find the post by lostsomewhere that you quoted from

It was taken from the thread http://forums.moneysavingexpert.com/showthread.html?t=380759

He removed the relevant posting.

louietudor wrote:

this goes alot futher than just the stolen money - its identity theft - through shopneo someone has your name address telephone number and dob - so of course you have the right to know how it happened

please can we at least agree this is a scandel!!

I'll agree that he should have been more proactive in contacting the police when the scale of this became known.

As for the DOB thing, my fingers always tend to mistype when I fill in details like these, same with telephone numbers. Strange that, but I really don't think anyone needs this info for online sales.
Although DOB can be used to verify names/addresses, no company I know uses telephone numbers for this purpose.

Parlivus · 27 February 2007 at 3:21PM

I'd like to point out this is my first post, and I've been reading this thread with interest as I find it shocking a company could have such a shocking security breach with such personal information at risk.

A few comments on the whole situation

DOB, Name + address
To hold those details for "marketing purposes" don't you need to be registered with the Information Commissioner's Office?
Lets just hope they are otherwise thats another breach of DPA (which isn't exactly light hearted).

To me after reading all these posts, its fairly obvious to me what has happened (this is my theory, not fact, just theory): either the SQL/CRM database they hold of customers details (which I hope wasn't webbased) has been compromised (and may well still be). Hence why they have the ALL of the details and not just some (i.e. they have name, address, DOB etc.).

Having used Xcart\OScommerce (which it was suggested they're using earlier in the thread) in the past for our company shop, I can tell you both of those shopping carts do have a function to store the card details within the database - obviously I understood the massive security risk that posed and didn't choose to go down that route.

This would then tally up with your receipt being printed off "manually" via an instore card machine with customer not present printed on it.

chinchilly · 27 February 2007 at 5:34PM

This is my first post too.

My partner has had money taken off his account but (as a prospective lawyer) I feel I must look at this reasonably.

Neo's owner wasn't just around when things were fine... he was around attempting to answer questions when this problem first became apparent and letters were sent out to a number of people they perceived to be most at risk. Obviously the problem became much wider but how is he supposed to know how wide the problem is if people don't actually tell him?

And even if he isn't around now, don't you think he has better things to do than sit and update people on a forum who have basically called him a liar and a thief? The hang 'em and flog 'em brigade would be out if he wasn't attempting to get to the bottom of the problem, which probably explains his absence.

Of course he isn't going to want to speculate about who dun it or what happened, as other people seem so keen to do, because it could compromise any possible criminal investigation and he wouldn't want to burn any bridges without clear evidence.

People have every right to be angry, my partner was. But the real criminal is the person who stole your money. And until you know who that person is, libellous comments don't do anything to help anyone do they?

jinkssick · 27 February 2007 at 5:46PM

I find it out of order how they were just like ''sorry guys your accounts have been breached, sorry''. This is not acceptable. It is not.

I processed an order with them, the least they can do is send us compensation in the form of vouchers to use at other sites, they have a legal obligation to sort this out. Its not as easy telling people, ''cancel your cards, redirect SO's and within 3 weeks youll get your money back''.

justlooking · 27 February 2007 at 5:51PM

"libellous comments"
Where ?? Strange how it always seems to be Newbie Money Savers that want us to shut up and smile. At the end of the day alot of us haven’t got our money back and Paul Owen is being no help.

hollydays · 27 February 2007 at 5:53PM

Perhaps you could advise all those who havent yet reported this to the Police to do so now.Dont you agree?As a prospective lawyer?

Poppycat · 27 February 2007 at 5:55PM

I agree with chinchilly. Unfortunately the longer this continues the more damage to his business, after all who in the right mind will buy anything in case there is unauthorised payments, I certainly wouldn't, although I hope people get there money back and his business doesn't suffer long term damage.

The real culprits should be caught and dealt with appropriately.

BTW I dont shop there but I do feel for both sides.

nordberg · 27 February 2007 at 5:59PM

justlooking wrote:

"libellous comments"
Where ?? Strange how it always seems to be Newbie Money Savers that want us to shut up and smile. At the end of the day alot of us haven’t got our money back and Paul Owen is being no help.

Could you be more specific. What do you want him to do and how do you think it will help?

Also, people who haven't got their money back, why? Do you not have some kind of protection on your cards?

Poppycat · 27 February 2007 at 6:05PM

Perhaps some paid by debits card no protection, it makes you think now, even credit cards are usually £100 limit.

You trust companies and banking services to have appropriate security measures unfortunately these low lifes are well organised and can infiltrate banks/call centres now.

Shopneo - Possible card fraud warning

Comments

Confirm your email address to Create Threads and Reply

🚀 Getting Started

Categories

Is this how you want to be seen?

Get our FREE Weekly email full of deals & guides - and it’s spam-free